Old 09-01-2013   #1
LetsModGTA
Registered User
 
Join Date: Aug 2013
Posts: 2
LetsModGTA is an unknown quantity at this point
Exclamation GTA Mod Security Hole.

Hello ladies and gentlemen. Today I have realised (not discovered, I'm sure all developers know of this) a very simple but potentially threatening security hole that can be introduced into any GTA mod.

The ability to download & execute a file without the user's permission or knowledge.

Here's an example to hopefully help you understand.

The script is loaded, and all seems fine. But when the user presses U an executable file is downloaded onto their pc, executed, and deleted so that it can't be traced.



As you can see, the script is loaded, executed, and then downloads "DELETEME" into the C drive.

Here's the script so you can see for yourself (Note: This one only downloads a PICTURE of GTA, rather than an executable file): https://dl.dropboxusercontent.com/u/...fernus.net.dll

Hopefully this can be detected sooner or later.

Thank you for your time.

The purpose of this thread was to make everyone aware of such dangers, I mean in no way to cause any damage, nor do I condone or motivate this kind of rubbish.

Thank you.

LetsModGTA is offline   Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On

Forum Jump


All times are GMT -6. The time now is 02:05 AM.